
1x
Payouts

1x
1st Places

1x
Top 10

1x
Top 25
All
Sherlock
Sep '24
high
Attacker can freeze chain and steal challenge deposits using fake `prevStateRoot`
high
Sequencer will be underpaid because of incorrect `commitScalar`
medium
Any sequencer can finalize arbitrary L2 blocks by committing during a challenge period
medium
Sequencer can avoid being slashed for invalid batch
medium
L1 re-org can cause valid challenge to be lost
medium
`Rollup.sol` cannot split batches across blobs, allowing inexpensive block stuffing